Re: Homeland Security Official Suggests Outlawing Rootkits

[Mike Johnson <mike () enoch org>]

Fergie wrote:
> Via C|Net News.
>
> [snip]
>
> Perhaps the best way to deal with rootkits is to outlaw them.

Eh, they'll blow it on this one if they do pass it.  What will happen is 
 they'll pass the legislation (not likely) only to find that the net is 
too wide (host based IDS/IPS anyone?  would a kernel debugger be a 
rootkit?) and that the cure is worse than the illness.  All the 
malicious rootkits out there will continue and the Sonys and BMGs of the 
world will simply find another way to surreptitiously install software 
onto their customer's computers.

Mike
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.